# HG changeset patch
# User Tomas Zeman <tzeman@volny.cz>
# Date 1366206962 -7200
# Node ID 89e588e5e724bd4aa0645f45dfa5ca8b31b57d1f
# Parent  f61233ece2533183d7ddfed8c0e7a94ad6f59259# Parent  2e93f6472911cd380ef9711eb9cf4b0f51586cbc
branch merge

diff -r 2e93f6472911 -r 89e588e5e724 freebsd/openvpn
--- a/freebsd/openvpn	Mon Mar 25 10:29:26 2013 +0100
+++ b/freebsd/openvpn	Wed Apr 17 15:56:02 2013 +0200
@@ -15,3 +15,15 @@
 access to the network attached to the server. Each client can also contact any
 other client, subject to firewall rules. 
 
+Revoke/Unrevoke a client certificate in OpenVPN
+http://blog.abhijeetr.com/2012/06/revokeunrevoke-client-certificate-in.html
+
+cname is the one which you want to disable:
+./revoke-all cname
+
+edit the server.conf & add the following line:
+crl-verify crl.pem
+
+ovpnCNcheck — an OpenVPN tls-verify script
+http://robert.penz.name/21/ovpncncheck-an-openvpn-tls-verify-script/
+http://robert.penz.name/wp-content/uploads/2008/01/ovpncncheck.sh